Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/30256B5CF7B911EEAB0C6C36C4F9AE02.roa
File: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (raw, json)
Hash identifier: qy9NNwAedenzkudqT2ZIz6zLSNmdTgzsSWzNkSNvY6s=
Subject key identifier: 4C:B9:EB:B4:CF:48:4C:F6:DE:C6:F9:83:2B:D1:3A:29:19:69:B4:55
Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial: 0BA6
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/30256B5CF7B911EEAB0C6C36C4F9AE02.roa
Signing time: Thu 11 Apr 2024 04:09:22 +0000
ROA not before: Thu 11 Apr 2024 04:09:22 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 45638
IP address blocks: 43.241.52.0/22 maxlen: 24
43.250.140.0/22 maxlen: 24
103.9.168.0/22 maxlen: 24
103.11.206.0/23 maxlen: 24
103.18.108.0/22 maxlen: 24
103.27.32.0/22 maxlen: 24
103.42.108.0/22 maxlen: 24
103.241.0.0/22 maxlen: 22
103.252.152.0/22 maxlen: 24
110.232.140.0/22 maxlen: 24
112.140.176.0/22 maxlen: 24
112.140.180.0/22 maxlen: 24
223.130.24.0/22 maxlen: 24
2400:8f80::/48 maxlen: 48
2400:8f80:1::/48 maxlen: 48
2400:8f80:ac::/48 maxlen: 48
2400:b800::/48 maxlen: 48
2400:b800:1::/48 maxlen: 48
2400:b800:2::/48 maxlen: 48
2400:b800:3::/48 maxlen: 48
2400:b800:4::/48 maxlen: 48
2400:b800:5::/48 maxlen: 48
2400:b800:6::/48 maxlen: 48
2400:b800:7::/48 maxlen: 48
2400:b800:8::/48 maxlen: 48
2407:e700:1::/48 maxlen: 48
2407:e700:2::/48 maxlen: 48
2407:e700:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 19:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2982 (0xba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Validity
Not Before: Apr 11 04:09:22 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=66176272-f7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:20:1a:38:f3:d9:06:c8:03:5b:6e:69:63:
8e:0e:3f:d7:51:e5:7c:7f:59:10:45:b8:bc:69:c4:
6b:dc:e8:36:96:4f:1e:a4:f2:9e:3d:c8:e6:e4:27:
5c:cc:e0:cf:13:36:ff:9b:bb:da:e5:1b:e8:d4:29:
06:3a:6d:80:d5:8f:20:c4:01:06:a6:1d:ed:e8:c0:
4a:3c:79:8e:94:3a:d8:bc:de:16:b2:b1:af:be:29:
a3:ba:5f:0b:91:b4:e3:b1:60:d1:d3:16:ea:01:83:
7b:5c:27:c5:f9:f7:e8:76:b4:7d:49:68:e9:6e:bf:
be:02:3c:d5:4c:ba:22:c6:88:d3:f5:a5:32:cd:54:
e7:74:c6:63:4e:ac:ed:31:e3:09:45:fd:cb:92:8a:
90:18:95:c1:95:64:50:74:99:35:25:5d:e5:cf:0a:
2e:53:5c:b5:b6:b5:02:c1:92:01:20:3e:94:b7:80:
dd:eb:81:49:56:ca:3b:4b:40:70:9d:6f:23:f9:ab:
c2:2c:5d:1d:59:3f:b3:98:6c:9f:08:ff:2c:cb:36:
c9:1f:49:24:be:eb:b4:a8:07:d8:c9:29:41:60:e9:
3c:c8:9c:52:28:e8:89:55:80:47:34:46:be:f2:28:
f0:b3:41:80:c8:4d:09:38:99:ae:26:2d:5c:26:c4:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B9:EB:B4:CF:48:4C:F6:DE:C6:F9:83:2B:D1:3A:29:19:69:B4:55
X509v3 Authority Key Identifier:
keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/30256B5CF7B911EEAB0C6C36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.52.0/22
43.250.140.0/22
103.9.168.0/22
103.11.206.0/23
103.18.108.0/22
103.27.32.0/22
103.42.108.0/22
103.241.0.0/22
103.252.152.0/22
110.232.140.0/22
112.140.176.0/21
223.130.24.0/22
IPv6:
2400:8f80::/47
2400:8f80:ac::/48
2400:b800::-2400:b800:8:ffff:ffff:ffff:ffff:ffff
2407:e700:1::-2407:e700:2:ffff:ffff:ffff:ffff:ffff
2407:e700:11::/48
Signature Algorithm: sha256WithRSAEncryption
10:85:7b:6a:89:22:b8:57:ed:63:97:66:c5:ea:cd:90:b0:fc:
f2:1d:58:e7:b2:9c:3a:82:7f:93:73:03:1f:1b:79:93:69:40:
d8:bc:f4:9a:51:5c:fc:78:13:6d:96:48:28:92:c2:d5:59:23:
22:b7:31:a3:e1:e6:cc:0c:a5:fb:eb:16:26:ae:52:87:2d:24:
7b:21:f8:56:26:c1:63:6c:71:94:2f:a6:76:b3:6e:76:2a:ed:
16:84:6a:ab:31:23:a7:eb:b0:a6:cf:56:db:7d:f6:38:0f:16:
8f:05:1a:45:ce:c0:a9:53:68:18:3b:8f:6d:3a:c8:91:01:c4:
d0:72:e4:0b:14:25:4f:94:c9:85:65:66:e6:c6:8c:5f:a0:43:
9b:6a:be:c3:60:f0:09:67:e2:b2:57:2a:32:3d:a7:7b:bd:b6:
b6:b1:1d:18:d8:96:f0:a3:45:a5:b2:92:aa:5f:8e:89:03:c4:
df:bc:ae:42:e7:86:0f:96:a7:4c:42:cc:a4:4b:c1:a8:ad:fa:
6b:24:bf:f8:b3:35:de:17:59:b5:8a:92:5b:31:d5:63:e8:4d:
bc:67:75:45:3d:46:c4:4f:ed:d1:4c:c0:c8:a5:ba:c1:51:73:
9a:0b:11:80:97:d1:e0:4f:63:aa:5b:2f:12:c0:81:8f:af:84:
95:02:0a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:55 2024 by rpki-client on console-ams.rpki-client.org